We are the UK’s first academic Research Institute to focus on understanding the overall security of organisations, including their constituent technology, people and processes. We focus on giving organisations more evidence, to allow them to make better decisions, aiding to the development of cyber security as a science. We strive to move security from common, established practice to an evidence base, the same way it happened in medicine.